Face ID not Optimised for Banking App

Discussion in 'iPhone' started by scotio200, Oct 29, 2017.

  1. scotio200 macrumors regular

    Joined:
    Mar 4, 2015
    #1
    As title says,

    My banking app updated the other day and noticed the release notes say the following :

    "At the moment Mobile Banking has not been optimised for Face ID. Therefore it has been Disabled."

    They do go on to say they are working to include it in a future release.

    Now I get that this is a Banking app and they probably want to test Face ID's security before adding to their application

    fullsizeoutput_150c.jpeg
     
  2. Newtons Apple macrumors Core

    Newtons Apple

    Joined:
    Mar 12, 2014
    Location:
    Jacksonville, Florida
    #2
    It would not surprise me is some of the banks are taking a “wait and see” approach to face ID before they allow their customers to use it.
     
  3. Mercenary macrumors 65816

    Mercenary

    Joined:
    Sep 17, 2012
    #3
    The phones not even out yet. So little early to be worrying and yes, it will be some time before face ID is adopted. It took Barclays 3 years to implement touch id
     
  4. Diorama macrumors 6502a

    Joined:
    Oct 6, 2017
    #4
    I don’t know if they can disable FaceID without also disabling TouchID.

    Although I guess banning Biometric if handset = iPhone X would do the same thing.
     
  5. Vermifuge macrumors 68000

    Vermifuge

    Joined:
    Mar 7, 2009
    #5
    When an iOS developer wants an app user to authenticate (using biometric ID) they can't specify how that authentication is performed. They use code that asks iOS to perform that action. Apple calls it "Local Authentication framework."

    This code ignores the method used for authentication. The developer never knows whether TouchID™ or FaceID™ is used for verification. ANY app that supports TouchID™ will automatically support FaceID™ on the iPhone X.

    Basically this means if an app already support TouchID™ The app will already work with FaceID™ App developers don't need to do anything special to enable this. Conversely banks will have to stop using biometric identification all together as the only way to stop FaceID™ being used thereby disabling TouchID™. This scenario is unlikely to happen as it would upset current customers of those apps.

    https://support.apple.com/en-us/HT208108

    "Apps that already support Touch ID will automatically support Face ID."

    https://images.apple.com/business/docs/FaceID_Security_Guide.pdf

    "Third-party apps can use system-provided APIs to ask the user to authenticate using Face ID or a passcode, and apps that support Touch ID automatically support Face ID without any changes."

    https://developer.apple.com/documentation/localauthentication

    Example of how the code is implemented...

    I mean i'm sure you have some skilled developers, but I'll take Apple's word on how biometrics on the iPhone X actually works.
     
  6. maflynn Moderator

    maflynn

    Staff Member

    Joined:
    May 3, 2009
    Location:
    Boston
    #6
    Lets not jump to conclusions yet, Apple just opened up pre-orders a few days ago.

    I don't expect apps, especially ones that need a high level of security will be jumping on the faceid bandwagon right out of the gate.
     
  7. ABC5S Suspended

    ABC5S

    Joined:
    Sep 10, 2013
    Location:
    Florida
    #7
    Touch ID for my banking is a must since I have a very long password. This is probably why many do not want to upgrade to the new X till next year when things begin to settle down. It’s only about 10 1/2 months away till the X plus
     
  8. nataku17 macrumors member

    Joined:
    Sep 25, 2016
    #8
    my bank app updated saying they now accept face ID if you have an iphone x.. i bank with halifax in the UK
     
  9. Newtons Apple macrumors Core

    Newtons Apple

    Joined:
    Mar 12, 2014
    Location:
    Jacksonville, Florida
    #9
    BUT a bank has the right to be in or out if it so wishes.
     
  10. daveak macrumors 6502

    Joined:
    Jun 28, 2009
    Location:
    Durham, UK
    #10
    That is true in so much as FaceID will just work if TouchID has already been implemented, however it is possible to detect what biometric is available as LAContext has a biometryType property. If that has a value of LABiometryTypeFaceID then you can choose to not request authentication. If they have updated their code to do this they can retain TouchID support and disable FaceID.
     
  11. AustinIllini macrumors demi-goddess

    AustinIllini

    Joined:
    Oct 20, 2011
    Location:
    Austin, TX
    #11
    There remains a lot to be seen with regards to whether or not FaceID is as secure as TouchID. Based on the fact that the face detection is used for more than identification and can be accessed by other apps, it's safe to assume that hackers will have an easier time breaking into FaceID.
     
  12. Zxxv macrumors 68040

    Joined:
    Nov 13, 2011
    Location:
    UK
    #12
    Its the same thing. Touch ID or FaceID. Its like changing your underwear. Its the same ****.
     
  13. ct2k7 macrumors 603

    ct2k7

    Joined:
    Aug 29, 2008
    Location:
    London
    #13
    It’s either TouchID / FaceID or go home
     
  14. AustinIllini macrumors demi-goddess

    AustinIllini

    Joined:
    Oct 20, 2011
    Location:
    Austin, TX
    #14
    The information gathered by the TouchID sensor is not available to appear developers. We know for a fact FaceID is.
     
  15. bambooshots macrumors 65816

    bambooshots

    Joined:
    Jul 25, 2013
    #15
    I believe according to Apple FaceID = TouchID. Where TouchID would have been used FaceID is substituted.

    There should be any problems.
     
  16. Zxxv macrumors 68040

    Joined:
    Nov 13, 2011
    Location:
    UK
    #16
    Ah I see. So developers can use the FACE ID captures in their apps. Interesting stuff. Thanks for clearing that up.

    Seems banks are opting out of faceID.
     
  17. AustinIllini macrumors demi-goddess

    AustinIllini

    Joined:
    Oct 20, 2011
    Location:
    Austin, TX
    #17
    From a development standpoint, yes. From a security standpoint...
     
  18. Diorama macrumors 6502a

    Joined:
    Oct 6, 2017
    #18
    Not directly it isn’t. No raw data.
     
  19. AustinIllini macrumors demi-goddess

    AustinIllini

    Joined:
    Oct 20, 2011
    Location:
    Austin, TX
    #19
    Generally I think it won't be a big deal and all banks will accept FaceID. I think right now there are some moderate concerns from people who see the security sensor used to create animoji.
     
  20. Newtons Apple macrumors Core

    Newtons Apple

    Joined:
    Mar 12, 2014
    Location:
    Jacksonville, Florida
    #20
    I agree, and that is why some banks will “go home” if not convinced of the security.
     
  21. Howyalikdemapls macrumors 6502

    Joined:
    Sep 2, 2013
    #21
    Say what? Developers get our FaceID data??
     
  22. Diorama macrumors 6502a

    Joined:
    Oct 6, 2017
    #22
    They get facial expression data only (I.e. are you smiling, raising eyebrows etc) not raw 3D sensor data
     
  23. Zxxv macrumors 68040

    Joined:
    Nov 13, 2011
    Location:
    UK
    #23
    What the **** has it to do with them how im feeling. This sounds like a get the **** away from me product feature.
     
  24. Howyalikdemapls macrumors 6502

    Joined:
    Sep 2, 2013
    #24
    So, AustinIllini’s comment doesn’t really make sense. It’s not like FaceID is less secure because of the data that apps have access to.
     
  25. Diorama macrumors 6502a

    Joined:
    Oct 6, 2017
    #25
    You realise they’ve had a front camera for years right?
     

Share This Page

85 October 29, 2017